Bill > H0597

This bill amends existing Idaho law to expand the powers and duties of the Office of Information Technology Services (OITS) concerning the acquisition, purchase, and installation of information technology (IT) equipment, services, software, and data management, in addition to existing telecommunications authority. The OITS will now conduct technical and financial analyses for these procurements, potentially using third-party brokers and collaborating with the division of purchasing. Importantly, most OITS IT procurements will be exempt from certain state purchasing laws, though purchases under $15,000 by departments and institutions are exempt from OITS oversight unless they involve higher education or elected officials. The bill also clarifies the OITS's role in cybersecurity by directing them to oversee the implementation of cybersecurity policies, consult with agencies on security needs, direct penetration tests and vulnerability scans, ensure mandatory employee training, develop a statewide cybersecurity website, and require multi-factor authentication for accessing IT systems. Additionally, it allows political subdivisions to use the state's telecommunications system and enables the OITS to accept federal funds and donations. The bill also includes provisions for criminal history checks for prospective employees and contractors of the OITS who provide IT services, and it will take effect on July 1, 2026, due to an declared emergency.

Government Affairs

State Affairs Committee (House)

https://legislature.idaho.gov/sessioninfo/2026/legislation/H0597/